Bug#629350: [pkg-kolab] Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-09 Thread Ondřej Surý
On Thu, Jun 9, 2011 at 00:10, Mathieu Parent wrote: > 2011/6/8 Moritz Muehlenhoff : > ... >> Why is kolab-cyrus-imapd a separate source package? Can we fix it for Wheezy >> to be built from a unified source package, i.e. a separate build target which >> applies the seven Kolab patches? > > Yes, th

Bug#629350: [pkg-kolab] Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-08 Thread Mathieu Parent
2011/6/8 Moritz Muehlenhoff : ... > Why is kolab-cyrus-imapd a separate source package? Can we fix it for Wheezy > to be built from a unified source package, i.e. a separate build target which > applies the seven Kolab patches? Yes, this is the way to go. Those 7 patches are not synced with upstr

Bug#629350: [pkg-kolab] Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-08 Thread Moritz Muehlenhoff
On Sun, Jun 05, 2011 at 11:30:03PM +0200, Mathieu Parent wrote: > 2011/6/5 Ondřej Surý : > > Hi, > > > > I have just realized that the same STARTTLS bug affect > > kolab-cyrus-imapd as well. > > > > Ccing Security team, so they can keep track of the security vulnerability. > > > > You can find the

Bug#629350: [pkg-kolab] Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-06 Thread Ondřej Surý
2011/6/5 Mathieu Parent : > 2011/6/5 Ondřej Surý : >> Hi, >> >> I have just realized that the same STARTTLS bug affect >> kolab-cyrus-imapd as well. >> >> Ccing Security team, so they can keep track of the security vulnerability. >> >> You can find the patch in pkg-cyrus-imapd/cyrus-imapd-2.2 git >

Bug#629350: [pkg-kolab] Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-05 Thread Mathieu Parent
2011/6/5 Ondřej Surý : > Hi, > > I have just realized that the same STARTTLS bug affect > kolab-cyrus-imapd as well. > > Ccing Security team, so they can keep track of the security vulnerability. > > You can find the patch in pkg-cyrus-imapd/cyrus-imapd-2.2 git > repository (on alioth) or in cyrus-

Bug#629350: STARTTLS vulnerability in kolab-cyrus-imapd

2011-06-05 Thread Ondřej Surý
Hi, I have just realized that the same STARTTLS bug affect kolab-cyrus-imapd as well. Ccing Security team, so they can keep track of the security vulnerability. You can find the patch in pkg-cyrus-imapd/cyrus-imapd-2.2 git repository (on alioth) or in cyrus-imapd-2.2 package sources. I would su